mirror of
https://github.com/taobataoma/meanTorrent.git
synced 2026-01-22 07:12:31 +01:00
2ad422ca9b
* Fix for users.profile.server.controller.js security (#1338) Fixes an issue where if req.body._id was not set to the current user it could potentially log the current user in as another user. Don't use req.body._id when editing user Prevents a user from being logged in as another if edit user form _id is not their own. Fixes #1338